Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade sntpUpgrade ntpUpgrade ntp-docUpgrade ntp-debuginfoUpgrade ntpdateUpgrade ntp-perl | Apr 27, 2020 | Jun 20, 2018 |
| Amazon_linux | — | Upgrade ntp | Sep 20, 2018 | Jun 20, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 20, 2018 |
| Centos_linux | — | Upgrade sntpUpgrade ntpUpgrade ntpdateUpgrade ntp-perlUpgrade ntp-debuginfoUpgrade ntp-doc | Dec 21, 2018 | Jun 20, 2018 |
| Debian | — | No solution exists | May 15, 2025 | Jun 20, 2018 |
| Gentoo Linux | — | Upgrade net-misc/ntp. | Mar 20, 2019 | Jun 20, 2018 |
| Hpux | — | Update NTP to the latest version | Dec 9, 2019 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ntpdateUpgrade ntp | Feb 22, 2019 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ntpdateUpgrade ntpUpgrade sntp | Feb 15, 2019 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ntpUpgrade ntpdate | Jan 9, 2019 | Jun 20, 2018 |
| Ibm Aix | — | Apply the fix or workaround for ntp_advisory11 | Dec 18, 2018 | Jun 20, 2018 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jun 20, 2018 |
| Oracle Solaris | — | Upgrade service/network/ntp to version 4.2.8.12-11.4.8.0.1.3.0 on Solaris 11.4 | Apr 17, 2019 | Jun 20, 2018 |
| Oracle_linux | — | Upgrade ntp-perlUpgrade ntp-docUpgrade ntpdateUpgrade sntpUpgrade ntp | Dec 20, 2018 | Jun 20, 2018 |
| Redhat_linux | — | No solution existsUpgrade ntp-debuginfoUpgrade ntp-perlUpgrade ntpdateUpgrade ntp-docUpgrade ntpUpgrade sntp | Dec 20, 2018 | Jun 20, 2018 |
| Suse | — | Upgrade ntp-docUpgrade ntp | Oct 24, 2018 | Jun 20, 2018 |
| Ubuntu | — | Upgrade ntpdate (Ubuntu Pro)Upgrade ntpUpgrade sntp (Ubuntu Pro)Upgrade ntp (Ubuntu Pro) | Jan 10, 2020 | Jun 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub